This website is not affiliated with, sponsored by, or approved by SAP AG.

Basis and Abap Role

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Basis and Abap Role

Postby talie » Thu Oct 20, 2011 6:11 am

hi all

since our implementation to go live until now we've managed to have sap_all on our basis and abap
execpt other users

but now audit requires to have a role for basis and abap on dev and prod

tell me your opinion on this sirs for justification to them and if they insist (which they will)

is there any compilation of tcodes where i can build a role the me and the abaper

thanks all in advance
talie
 
Posts: 36
Joined: Tue Jul 06, 2010 3:25 am

Re: Basis and Abap Role

Postby Gothmog » Thu Oct 20, 2011 6:25 am

Moved from Basis.
68 74 74 70 3a 2f 2f 74 69 6e 79 75 72 6c 2e 63 6f 6d 2f 62 64 6f 37 6d 77 67
Gothmog
 
Posts: 1941
Joined: Wed Sep 12, 2007 4:46 am
Location: Probably not home

Re: Basis and Abap Role

Postby talie » Thu Oct 20, 2011 6:27 am

thanks sir
talie
 
Posts: 36
Joined: Tue Jul 06, 2010 3:25 am

Re: Basis and Abap Role

Postby Al. » Sun Oct 23, 2011 11:32 pm

Hi,

I would generally recommend (and audit will recommend too) that at absolute minimum there are separate roles for Basis, Security (if not done by Basis team), Developers/ABAP (display only in prod), Functional support (could be multiple roles, could include config - depends on your setup).

No-one needs SAP_ALL in production and the requirement is valid.

When defining the roles you need to ID what your teams need to do to provide adequate support. Have a look through the standard menu and you will get much of the info. Don't forget to suitable restrict the related auths for the transactions. As an example the developer role should not be able to perform any changes or post any transactions.
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London

Re: Basis and Abap Role

Postby talie » Mon Oct 24, 2011 4:05 pm

@al

thanks for the info....appreciate the reply......
talie
 
Posts: 36
Joined: Tue Jul 06, 2010 3:25 am


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 5 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.